Wireshark
Free
Absolutely Free
Wireshark overview
Wireshark is one of the world's foremost network protocol analyzers, and is the standard in many parts of the industry. It is the continuation of a project that started in 1998. Hundreds of developers around the world have contributed to it, and it it still under active development.
Wireshark has a rich feature set which includes the following:
- Standard three-pane packet browser
- Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
- Multi-interface: Along with a standard GUI, Wireshark includes TShark, a text-mode analyzer which is useful for remote capture, analysis, and scripting
- The most powerful display filters in the industry
- VoIP analysis
- Live capture and offline analysis are supported
- Read/write many different capture file formats: tcpdump (libpcap), NAI's Sniffer (compressed and uncompressed), Sniffer Pro, NetXray, Sun snoop and atmsnoop, Shomiti/Finisar Surveyor, AIX's iptrace, Microsoft's Network Monitor, Novell's LANalyzer, RADCOM's WAN/LAN Analyzer, HP-UX nettl, i4btrace from the ISDN4BSD project, Cisco Secure IDS iplog, the pppd log (pppdump-format), the AG Group's/WildPacket's EtherPeek/TokenPeek/AiroPeek, Visual Networks' Visual UpTime and many others
- Capture files compressed with gzip can be decompressed on the fly
- Hundreds of protocols are supported, with more being added all the time
- Coloring rules can be applied to the packet list, which eases analysis
What’s new in version 4.0.8
Updated on Aug 26 2023
The following vulnerabilities have been fixed:
- wnpa-sec-2023-23 CBOR dissector crash. Issue 19144.
- wnpa-sec-2023-24 BT SDP dissector infinite loop. Issue 19258.
- wnpa-sec-2023-25 BT SDP dissector memory leak. Issue 19259.
- wnpa-sec-2023-26 CP2179 dissector crash. Issue 19229.
The following bugs have been fixed:
- TShark cannot capture to pipe on Windows correctly. Issue 17900.
- Wireshark wrongly blames group membership when pcap capabilities are removed. Issue 18279.
- Packet bytes window broken layout. Issue 18326.
- RTP Player only shows waveform until sequence rollover. Issue 18829.
- Valid Ethernet CFM DMM packets are shown as malformed. Issue 19198.
- Crash on DICOM Export Objects window close. Issue 19207.
- The QUIC dissector is reporting the quic_transport_parameters max_ack_delay with the title \"GREASE\" Issue 19209.
- Preferences: Folder name editing behaves weirdly, cursor jumps. Issue 19213.
- DHCPFO: Expert info list does not show all expert infos. Issue 19216.
- Websocket packets not decoded and displayed for Field type=Custom and Field name websocket.payload.text. Issue 19220.
- Cannot read pcapng file captured on OpenBSD and read on FreeBSD. Issue 19230.
- UI: While capturing the Wireshark icon changes from green to blue when new file is created. Issue 19252.
- Conversation: heap-use-after-free after wmem_leave_file_scope. Issue 19265.
- IP Packets with DSCP 44 does not indicate "Voice-Admit" Issue 19270.
- NAS 5GS Malformed Packet Decoding SOR transparent container PLMN ID and access technology list. Issue 19273.
- UI: Auto scroll button in the toolbar is turned on when manually scrolling to the end of packet list. Issue 19274.
Information
App requirements
- Intel 64
- macOS 10.14 or later
- Version for Apple Silicon
Try our new feature and write a detailed review about Wireshark. All reviews will be posted soon.
(0 Reviews of )
There are no reviews yet
Comments
User Ratings
Jun 16 2022
Version: 3.6.6
There is a native ARM version of Wireshark now as well. M1 & M2 Mac users need not bother with the Intel version. You'll find it at the Dev site: https://www.wireshark.org/download.html
Apr 15 2022
Version: 3.6.3
ARM versions of Wireshark are now available. If you have an M1 series Mac, be sure to get the Wireshark macOS Arm 64-bit .dmg version! The general downloads page is here: https://www.wireshark.org/download.html
Apr 23 2021
Version: 3.4.5
The swiss army knife of packet analyzers. Incredible.
Jul 28 2019
Version: 3.1.0
Hey guys, was curious if there is anyone here that uses Homebrew, I had upgraded to Wireshark 3.1.0 via the cask command in brew, then they released an update that put it back to version 3.0.3, which I had initially. I was just curious why? Thanks
Jul 21 2017
Version: 2.4.0
Link is wrong, goes to old version.
correct 2.4 version https://2.na.dl.wireshark.org/osx/Wireshark%202.4.0%20Intel%2064.dmg
Nov 21 2015
Version: 2.0.0
Finally it has a native UI and doesn't require X11/XQuartz!
Oct 29 2015
Version: 1.12.8
Wireshark.org suggests that users of OS X try v2.0.0rc1, first. If it doesn't work for you, then try this version.
Mar 17 2015
Version: 1.12.4
This may possibly be of help to other new WireShark users who are having trouble getting WireShark to launch in Yosemite. Some of this has been shared before, but there is a little added twist at the end which worked for me.
I made repeated attempts to use both WireShark 1.12.4 and 1.99.3, but without success. Regardless of which version I used, WireShark keep freezing up during the initialization process.
In the initialization window, WireShark would get as far as "Loading module preferences", or about three quarters of the way done, and in the bottom of the window it would say "Please wait while Wireshark is initializing..."; and then freeze-up.
So I conducted some quick research on the web and discovered that I had to enter "sudo ln -s /opt/X11 /usr/X11" in the Terminal in order to restore a link an X11 link that Yosemite breaks. However, even that did not help.
Next, I reinstalled XQuartz 2.7.7. Again, that didn't help either.
Then I came across an online comment where someone stated that they typed "sudo wireshark" in the Terminal. Guess what? I don't know why, but it worked. The Terminal spit out the following, and then WireShark launched on my desktop:
void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting
void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting
void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting
void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting
22:01:58 Dbg plugin_dir: /Applications/Wireshark.app/Contents/PlugIns/wireshark
Now I can click WireShark's icon in the Dock, and it appears to be working fine.
Feb 14 2015
Version: 1.12.3
Wireshark on Yosemite
To get Wireshark working on Yosemite you will need to install X11 which may be found at:
http://xquartz.macosforge.org/landing/
and then make the following link:
$ sudo ln -s /opt/X11 /usr/X11
Sep 17 2014
Version: 1.12.0
Wireshark 1.12.1 is available fixing several security issues with DoS vulnerabilities in some of their parsers or dissectors.
Enjoy.
Apr 1 2013
Version: 1.8.6
Just for the record, when you start WireShark (1.9.2) in Mountain Lion, it offers to install an X11 system. If you say yes, it takes you to an Apple Support page which contains a link to the XQuartz project. You have to download and install it. Note that it gets installed in the Utilities folder inside the Applications folder.
When you start WireShark, it asks you to find X11. Navigate to Utilities folder and select XQuartz.
WireShark now freezes for a couple of minutes while it builds font caches - DON'T PANIC! Then the window appears.
Jun 17 2012
Version: 1.6.7
Beware. Apple is REMOVING X11 in Mac OS X 10.8 Mountain Lion. Not an optional install. It's *GONE*!
In a few months, Wireshark will be unusable on up-to-date Macs.
May 31 2012
Version: 1.6.7
I just downloaded it for a networking class. On their site the version is 1.6.8, here it's 1.6.7. Please update as I depend on Macupdate for the most recent versions.
Thanks
Nov 5 2011
Version: 1.6.3
This program has been very useful in troubleshooting tracking and analytics. Using the GA debugger only helps for chrome, using this we can see the call any browser makes or even a connected iPad or iPhone!
Oct 22 2011
Version: 1.6.2
After trying for a hundred times, I still have problems installing this program. Any workaround for Lion, or is it not supported?
Oct 5 2011
Version: 1.6.2
I used to run WireShark in windows, now this version has even better functionalities in Mac. Works great, I like it.
Free
Absolutely Free
Similar apps
Debookee
Analyze the information being sent over your network.
Is this app is similar to Debookee? Vote to improve the quality of this list.
Vote results
0
Upvotes
3
Total score
0
Downvotes
Cocoa Packet Analyzer
Network packet protocol analyzer.
Is this app is similar to Cocoa Packet Analyzer? Vote to improve the quality of this list.
Vote results
2
Upvotes
2
Total score
0
Downvotes
Charles
Java HTTP proxy and monitor.
Is this app is similar to Charles? Vote to improve the quality of this list.
Vote results
0
Upvotes
1
Total score
0
Downvotes
Airfoil
Send audio from any app to AirPort Express/Apple TV and more.
Is this app is similar to Airfoil? Vote to improve the quality of this list.
Vote results
0
Upvotes
1
Total score
0
Downvotes
PacketStream
Easy way to configure/use Apple network monitoring tools.
Is this app is similar to PacketStream? Vote to improve the quality of this list.
Vote results
0
Upvotes
1
Total score
0
Downvotes
New and Recently Updated